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Amazon knows customers care deeply about privacy and data security, and we optimize our 
work to get these issues right for customers. 


e Amazon does not disclose customer information in response to government demands 
unless we're required to do so to comply with a legally valid and binding order. Unless 
prohibited from doing so or there is clear indication of illegal conduct in connection with the 
use of Amazon products or services, Amazon notifies customers before disclosing content 
information. 


e Where we need to act to protect customers, we do. We have repeatedly challenged 
government demands for customer information that we believed were overbroad, winning 
decisions that have helped to set the legal standards for protecting customer speech and 
privacy interests. We also advocate in Congress to modernize outdated privacy laws to 
require law enforcement to obtain a search warrant from a court to get the content of 
customer communications. That's the appropriate standard, and it's the standard we follow. 


e While we recognize the legitimate needs of law enforcement agencies to investigate criminal 
and terrorist activity, and cooperate with them when they observe legal safeguards for 
conducting such investigations, we oppose legislation mandating or prohibiting security or 
encryption technologies that would have the effect of weakening the security of products, 
systems, or services our customers use, whether they be individual consumers or business 
customers. For AWS clients, we offer strong encryption as one of many standard security 
features, and we provide them the option to manage their own encryption keys. We publish 
security best practices documents on our website and encourage our clients to use these 
measures to protect sensitive content. 


e We are members of numerous associations focused on protecting privacy and security, and 
AWS in particular has achieved a number of internationally recognized certifications and 
accreditations demonstrating compliance with third-party assurance frameworks. AWS 
clients have control over their content and where it resides. 
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